HIGH🇬🇧 English

CVE-2020-28702

CVSS 7.5v3.1pub. 2021-11-01upd. 2024-11-21

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Pybbs Project Pybbs

    APP
    Pybbs Project
    5.2.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Referencje

Powiązane podatności

CVE-2025-8547MEDIUM5.5ten sam produkt

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affec...

CVE-2025-8546MEDIUM5.5ten sam produkt

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the f...

CVE-2022-23391MEDIUM6.1ten sam produkt

A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or ...

CVE-2025-12297LOW2.1ten sam produkt

W oprogramowaniu atjiu pybbs do wersji 6.0.0 wykryto lukę bezpieczeństwa dotyczącą nieznanej funkcji w pliku U...

CVE-2025-8812LOW1.9ten sam produkt

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an un...